Not the main point -- and I don't know why a filesystem needs to be in kernel space -- but the swipe at network filesystems is wrong. Of the ones I know, at le

Not the main point -- and I don't know why a filesystem needs to be in kernel space -- but the swipe at network filesystems is wrong. Of the ones I know, at least OrangeFS can use public keys, if that's what you want (though I don't know if they encrypt traffic for use outside something VPN-ish). I don't know what the current story is on AFS encryption (which was weak), but NFS can use Kerberos 5, not that you use /etc/shadow with Kerberos anyway. I'll defer to Ted Ts'o on whether it's inappropriate these days, but I've used SSH for ages with Kerberos.